
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/161edda2-6ca0-31d3-8cbb-ca6c6808e0f7.roa
File: 161edda2-6ca0-31d3-8cbb-ca6c6808e0f7.roa (raw, json)
Hash identifier: 43PMDYJpHeLZhnGtfy/X2nkqdUy/G9KSKy2EOL9fDjw=
Subject key identifier: 20:D1:5D:05:AE:28:5C:D9:90:23:B3:64:33:FE:FA:9D:51:4A:9A:40
Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial: 010D0C9F43285849ADCF66B362052453B42BE100
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/161edda2-6ca0-31d3-8cbb-ca6c6808e0f7.roa
Signing time: Mon 28 Apr 2025 19:06:33 +0000
ROA not before: Mon 28 Apr 2025 19:06:33 +0000
ROA not after: Sun 27 Jul 2025 19:06:33 +0000
asID: 5065
IP address blocks: 216.132.14.0/24 maxlen: 24
216.132.114.0/24 maxlen: 24
216.132.115.0/24 maxlen: 24
216.132.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ad:cf:66:b3:62:05:24:53:b4:2b:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Validity
Not Before: Apr 28 19:06:33 2025 GMT
Not After : Jul 27 19:06:33 2025 GMT
Subject: CN=acd8305c-f25f-4d75-8cf7-153ed9da254c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:7f:91:6f:d3:1c:f3:5d:d5:cc:5e:68:3c:
b3:cb:a4:03:f8:9a:ba:29:5a:f2:73:51:e0:47:ea:
f1:1f:4b:87:25:38:91:81:6e:24:32:8f:e1:12:e7:
94:90:16:2d:93:95:62:57:0b:a1:6a:1c:16:29:fe:
46:a6:58:c2:c5:a3:b0:e9:43:53:17:22:11:1a:83:
43:9a:52:ae:11:c3:01:3f:be:a8:30:d6:25:2d:68:
04:e1:f7:75:4f:43:22:05:b0:26:61:9c:32:52:e6:
69:36:b3:12:b4:81:05:48:3d:e1:79:f7:a7:cf:84:
84:45:ba:2f:19:8a:1e:6c:84:b1:7d:89:c5:dd:c7:
c6:fc:a7:de:1f:1b:ca:2d:c3:ff:17:c9:3d:67:85:
d3:e8:95:81:2d:b6:f1:1b:74:16:06:0f:2c:a1:f4:
92:02:68:87:ba:1b:07:20:41:8e:04:34:e5:34:ae:
f1:4c:82:44:89:98:c5:bc:29:48:89:8d:f6:fa:97:
01:b4:69:f7:fd:99:91:be:70:cd:27:31:92:cf:7a:
77:12:14:b6:2b:55:ea:e6:3a:5e:dd:1e:c1:2c:ca:
12:7a:3c:27:5a:0f:b0:bb:39:75:f7:9b:53:fb:72:
2f:ee:70:36:84:f7:8b:02:7b:6d:24:c4:cd:9a:07:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D1:5D:05:AE:28:5C:D9:90:23:B3:64:33:FE:FA:9D:51:4A:9A:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/161edda2-6ca0-31d3-8cbb-ca6c6808e0f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
X509v3 Authority Key Identifier:
keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
sbgp-ipAddrBlock: critical
IPv4:
216.132.14.0/24
216.132.114.0/23
216.132.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:83:88:10:2d:09:a9:2c:ec:93:92:ec:70:05:be:31:93:1a:
a2:7a:aa:33:c9:c7:73:05:fd:b7:94:65:90:23:ca:5e:56:a1:
a9:b9:1a:f9:6d:03:6b:ff:be:64:b1:18:40:89:ab:9e:d6:db:
32:85:ad:93:06:50:16:39:14:52:83:05:25:60:f6:de:52:c3:
7c:4e:9e:ed:9c:8e:f1:e7:9b:e4:bc:65:da:7b:d5:cb:ab:89:
ba:55:d0:f3:9d:9b:7a:05:e9:9d:14:7a:2f:36:72:e6:47:a4:
d6:3c:d5:a6:fe:ce:53:67:34:a9:29:a2:cb:4b:c5:9c:3b:d9:
bb:4c:be:e6:78:de:d4:74:3d:cf:25:6f:a6:39:34:95:31:81:
3c:1f:7f:1f:1f:9d:8c:7f:de:d9:6b:d2:ba:9d:6e:85:65:6a:
93:d0:94:38:3e:0d:bd:a5:f9:9f:1a:c8:71:39:d1:a1:1e:13:
33:26:e6:a6:da:7a:bb:be:e8:7a:15:e7:cb:79:06:5c:a7:dc:
60:95:41:b8:ec:e1:27:88:21:ff:67:c3:80:f2:53:2d:9e:56:
ed:6a:9f:0b:07:16:2b:d5:f9:3d:7a:0f:90:fa:42:1a:1d:5e:
03:85:c1:76:4b:41:3d:2e:86:56:c1:50:1e:a5:d0:f5:5e:f5:
f5:f1:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:39:19 2025 by rpki-client